de874ccaaa9950dbbcbaa2cb9ad08765ec1fa68ebc5cfaabb80bcb03cd7bf119

Analysis

max time kernel
298s
max time network
268s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/07/2026, 09:38

Target
Game Files/Moorhun Kart 2 Setup/layout.bin
Size 417B
Sample260711-ll45kshv6v
SHA256 de874ccaaa9950dbbcbaa2cb9ad08765ec1fa68ebc5cfaabb80bcb03cd7bf119
MD5 e8881a4ef7d3cfbf34a3008f17c92806
SHA1 ef688293334a314164a2ee4b42cbddbd847fefc6
SHA512 435024c93d6b172ef5e1feaaa431b03b4f71d3466d4cb18d2d53fa3a4e0e990b32e70a40305b3985eb78a14833a00f36906cd60c89d58f560aa39c305f6784ee
TLSH
T194E04C293A5F9601D0001D7528BF86D957E0B9B97561A2172298B29E6C0A608BC84042
MD5 SHA1 SHA512 TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
980	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Game Files\Moorhun Kart 2 Setup\layout.bin"
1⤵
- Modifies registry class
PID:788

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact